https://ruby-china.org/vstorm en-us <p>最新的 Homeland 镜像没有 acme.sh 文件，导致 sudo make install_ssl 失败</p> <pre class="highlight plaintext"><code>root@hostker:~/homeland-docker# sudo make install_ssl docker-compose start web Starting web ... done docker-compose run web bash -c 'echo $cert_domain' Starting homeland_postgresql ... done Starting homeland_redis ... done Starting homeland_worker ... done Starting homeland_app_backup ... done Starting homeland_app ... done realx.cc docker-compose run web bash -c '/root/.acme.sh/acme.sh --issue -d $cert_domain -w /home/app/homeland/public --home /home/app/ssl --debug' Starting homeland_postgresql ... done Starting homeland_redis ... done Starting homeland_worker ... done Starting homeland_app ... done Starting homeland_app_backup ... done bash: /root/.acme.sh/acme.sh: No such file or directory Makefile:14: recipe for target 'install_ssl' failed make: *** [install_ssl] Error 127 </code></pre> <p>docker exec 进去容器，没有/root/.acme.sh/acme.sh 文件，切换成 3.5.0 版本的镜像后，安装成功</p> vstorm Fri, 07 Aug 2020 10:43:25 +0800 https://ruby-china.org/topics/40247 https://ruby-china.org/topics/40247 <p><img src="https://l.ruby-china.com/photo/2020/18e7c022-5e41-4aeb-907b-60351c88abc9.jpeg!large" title="" alt=""> <img src="https://l.ruby-china.com/photo/2020/c801265f-745d-4e82-90d0-bf239c9dbcb0.jpeg!large" title="" alt=""> 找了不同的 android 和 ios 测试过，ruby-china 的手机网页版显示都有点问题，所有节点和侧边栏都显示不出来。</p> vstorm Fri, 31 Jul 2020 10:36:43 +0800 https://ruby-china.org/topics/40219 https://ruby-china.org/topics/40219 <p>默认的部署，会将 Redis 和 PostgreSQL 暴露到外网，而且是没有密码的。我查看了 homeland 的配置文档，没看到有可以设置密码的配置项。</p> <p>部署后，redis 隔一段时间就会报错，最后在进入容器后，发现/data 目录里多了 red2.so 和 kinsing*两个文件，google 搜索了下，才知道是 redis 被入侵了。</p> <p><img src="https://l.ruby-china.com/photo/2020/f8d99d9b-3f4b-4be5-9913-320f5f24404a.jpg!large" title="" alt=""></p> <p>建议将 docker-compose 的 port 映射改成"127.0.0.1:6379:6379"，只允许本地访问，防止被入侵。</p> vstorm Tue, 28 Jul 2020 11:21:55 +0800 https://ruby-china.org/topics/40203 https://ruby-china.org/topics/40203